#federal-cybersecurity
#federal-cybersecurity
[ follow ]
#cisa #vulnerability-management #active-exploitation #government-shutdown #critical-patches #cisa-kev-catalog
#vulnerability-management
Information security
fromThe Hacker News
1 day agoCISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited
CISA added three actively exploited vulnerabilities to its KEV catalog, including critical flaws in SolarWinds Web Help Desk, Omnissa Workspace One UEM, and Ivanti Endpoint Manager, with federal agencies required to patch by mid-to-late March 2026.
fromNextgov.com
1 month agoOMB reverses Biden-era software attestation order
The White House on Friday rescinded a 2022 order that mandated a single, standardized self-attestation form for federal agencies to obtain cybersecurity assurances from software vendors, arguing the policy hindered agencies from adopting security solutions for their specific system needs. "There is no universal, one-size-fits-all method of achieving that result," Office of Management and Budget Director Russ Vought said in the memo released Friday. "Each agency should validate provider security utilizing secure development principles and based on a comprehensive risk assessment."
US politics
US politics
fromWIRED
2 months agoFears Mount That US Federal Cybersecurity Is Stagnating-or Worse
The government shutdown worsened federal cybersecurity risks by creating monitoring blind spots, disrupting contractor relationships, and slowing contracts and hiring, increasing vulnerability to major breaches.
Information security
fromNextgov.com
4 months agoUS cyber policy goals have regressed during Trump 2.0 in 'unprecedented setback,' landmark report says
Federal cyber policy has regressed about 13%, with workforce cuts, funding reductions, and rollback of initiatives undermining CISA, State cyber diplomacy, and counter-disinformation efforts.
[ Load more ]